Commit Graph

113 Commits

Author SHA1 Message Date
Vercel 670e78eef6 Fix React Server Components CVE vulnerabilities
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-12 03:25:49 +00:00
vercel[bot] 9cbf516e3d Fix React Server Components CVE vulnerabilities (#37)
Updated dependencies to fix Next.js and React CVE vulnerabilities.

The fix-react2shell-next tool automatically updated the following packages to their secure versions:
- next
- react-server-dom-webpack
- react-server-dom-parcel  
- react-server-dom-turbopack

All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
2025-12-11 14:15:11 -08:00
Hayden Bleasel ec399323c8 Run Geistdocs updater 2025-12-10 08:48:37 -08:00
Hayden Bleasel cf2d0b3c5d Update mdx-components.tsx 2025-12-09 18:42:29 -08:00
Hayden Bleasel a010ed0155 Revert "Update Geistdocs"
This reverts commit cdea9a59dd.
2025-12-09 14:54:56 -08:00
Hayden Bleasel ba5f842f5b Run updater 2025-12-09 12:47:36 -08:00
Hayden Bleasel cdea9a59dd Update Geistdocs 2025-12-09 12:38:00 -08:00
Hayden Bleasel 6252f98819 Update geistdocs.tsx 2025-12-06 12:59:51 -08:00
Hayden Bleasel 2908248430 Fix package.json merge 2025-12-05 07:55:51 -08:00
Hayden Bleasel 55fae375a4 Update docs, internationalization (#35)
* Update Geistdocs

* Update geistdocs.tsx

* Run translation script

* Delete toc.tsx

* Update route.ts

* Update route.ts
2025-12-04 23:57:35 -08:00
vercel[bot] 50a93d5923 Update repo for React Flight RCE advisory (#34)
React Flight / Next.js RCE Advisory Security Update

## Summary
Successfully updated the components.build repository to address the React Flight / Next.js RCE advisory (CVE-2025-XXXXX).

## Vulnerability Detection
The project was identified as affected by this vulnerability:
- **Next.js version**: 16.0.3 (vulnerable)
- **Package manager**: pnpm
- **React version**: 19.2.0 (managed by Next.js)
- **No direct React Flight packages**: The project does not directly use react-server-dom-webpack, react-server-dom-parcel, or react-server-dom-turbopack

## Changes Applied

### Modified Files:
1. **package.json**
   - Updated `next` from `16.0.3` to `16.0.7` (patched version for 16.x branch)
   - React and react-dom versions (19.2.0) remain unchanged as they are managed by Next.js

2. **pnpm-lock.yaml**
   - Lockfile updated to reflect the new Next.js version and its dependencies
   - Next.js 16.0.7 automatically includes patched React Flight packages

## Verification
- ✅ Dependencies successfully installed with `pnpm install`
- ✅ Production build completed successfully with `next build`
- ✅ All 55 pages generated without errors
- ✅ TypeScript compilation passed

## Next.js Upgrade Details
As per the advisory:
- Next.js 16.x projects should upgrade to 16.0.7
- The patched version includes fixes for the React Flight RCE vulnerability
- React versions are automatically managed by Next.js and do not require manual updates

## Security Impact
This update addresses a critical Remote Code Execution (RCE) vulnerability in React Flight / React Server Components that could allow attackers to execute arbitrary code on the server. The vulnerability affects Next.js applications using React Server Components.

The project is now secure and running on the patched version.

Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com>
Co-authored-by: Hayden Bleasel <hello@haydenbleasel.com>
2025-12-04 21:06:47 -08:00
Hayden Bleasel 5d1df19827 Bump non-docs deps 2025-12-04 20:58:15 -08:00
Hayden Bleasel 9c4795f473 Bump Streamdown 2025-11-24 11:30:49 -08:00
Hayden Bleasel 9f864cefa5 Update search.tsx 2025-11-16 16:36:35 -08:00
Hayden Bleasel 3cb7a8cd31 Update search.tsx 2025-11-16 15:36:16 -08:00
Hayden Bleasel a8657e02ac Update Geistdocs 2025-11-16 15:06:23 -08:00
Hayden Bleasel cf677c3885 Fix responsive design 2025-11-16 15:06:15 -08:00
Hayden Bleasel 7016d8a016 Update layout.tsx 2025-11-16 11:10:37 -08:00
Hayden Bleasel fcdf231b22 Update video.tsx 2025-11-16 10:17:55 -08:00
dependabot[bot] 53a7364609 Bump js-yaml in the npm_and_yarn group across 1 directory (#23)
Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-14 21:29:55 -08:00
Hayden Bleasel ea342e6a8f Update next.config 2025-11-14 16:20:47 -08:00
Hayden Bleasel 34ffe7a10a Load og fonts locally 2025-11-14 16:15:00 -08:00
Hayden Bleasel d97bb7de16 Update route.ts 2025-11-14 14:59:03 -08:00
Hayden Bleasel cbe7fcb723 Update sidebar.tsx 2025-11-14 14:44:25 -08:00
Hayden Bleasel d296fc1c5d Geistdocs updates 2025-11-14 13:54:00 -08:00
Hayden Bleasel d3f9e59ecd Update utils.ts 2025-11-14 12:48:30 -08:00
Hayden Bleasel a699fd83e1 Update route.ts 2025-11-14 12:01:02 -08:00
Hayden Bleasel 101ca62c2d Update docs styles (#22)
* Initial implementation

* Bump deps

* Update code-block.tsx

* Update navbar.tsx

* Move video to Geistdocs

* Update layout.tsx

* Margin fixes

* Update code-block-tabs.tsx

* Update docs-page.tsx

* Update navbar.tsx

* Add feed

* Update docs-layout.tsx

* Update mobile-menu.tsx

* Fix adaptable layout

* Update docs-page.tsx

* Update docs page composability

* Update global.css

* Remove unused AI Elements

* Update Feedback
2025-11-14 11:56:29 -08:00
Hayden Bleasel 00d2d06594 Bump deps 2025-11-11 18:39:32 -08:00
Hayden Bleasel 492e7d6852 Update shadcn/ui 2025-11-11 18:39:19 -08:00
dependabot[bot] a4d2dd2938 Bump lucide-react from 0.548.0 to 0.552.0 (#16)
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) from 0.548.0 to 0.552.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.552.0/packages/lucide-react)

---
updated-dependencies:
- dependency-name: lucide-react
  dependency-version: 0.552.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:38:14 -08:00
dependabot[bot] ca45c95117 Bump @types/node from 24.9.1 to 24.9.2 (#17)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.9.1 to 24.9.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 24.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:36:30 -08:00
dependabot[bot] 1b43038640 Bump fumadocs-ui from 16.0.3 to 16.0.6 (#15)
Bumps [fumadocs-ui](https://github.com/fuma-nama/fumadocs) from 16.0.3 to 16.0.6.
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-ui@16.0.3...create-fumadocs-app@16.0.6)

---
updated-dependencies:
- dependency-name: fumadocs-ui
  dependency-version: 16.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:34:09 -08:00
dependabot[bot] 230b374ab9 Bump fumadocs-mdx from 13.0.2 to 13.0.3 (#19)
Bumps [fumadocs-mdx](https://github.com/fuma-nama/fumadocs) from 13.0.2 to 13.0.3.
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-mdx@13.0.2...fumadocs-ui@13.0.3)

---
updated-dependencies:
- dependency-name: fumadocs-mdx
  dependency-version: 13.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:29:25 -08:00
dependabot[bot] a7ae985156 Bump fumadocs-core from 16.0.3 to 16.0.6 (#14)
Bumps [fumadocs-core](https://github.com/fuma-nama/fumadocs) from 16.0.3 to 16.0.6.
- [Release notes](https://github.com/fuma-nama/fumadocs/releases)
- [Commits](https://github.com/fuma-nama/fumadocs/compare/fumadocs-core@16.0.3...create-fumadocs-app@16.0.6)

---
updated-dependencies:
- dependency-name: fumadocs-core
  dependency-version: 16.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:26:38 -08:00
Luis Ouriach 6190449296 Change Dialog example's code comments from 'Form' to 'Dialog' (#5) 2025-11-11 18:26:27 -08:00
Tima Gixe b308e9a897 fix: use page.path for markdown URL in page actions (#8) 2025-11-11 18:26:06 -08:00
Reza Attarzadeh 7d56bf6045 fix: relative link to components docs (#9) 2025-11-11 18:25:41 -08:00
Jing Su 50b323a042 Fix typo in Exporting Types code example (#11) 2025-11-11 18:25:24 -08:00
dependabot[bot] 334c906e0c Bump ultracite from 6.0.3 to 6.1.0 (#12)
Bumps [ultracite](https://github.com/haydenbleasel/ultracite) from 6.0.3 to 6.1.0.
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@6.0.3...ultracite@6.1.0)

---
updated-dependencies:
- dependency-name: ultracite
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:24:58 -08:00
dependabot[bot] c125b04d77 Bump @biomejs/biome from 2.3.1 to 2.3.2 (#13)
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.2/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:24:43 -08:00
dependabot[bot] 4a93b8a4e2 Bump react-hook-form from 7.65.0 to 7.66.0 (#18)
Bumps [react-hook-form](https://github.com/react-hook-form/react-hook-form) from 7.65.0 to 7.66.0.
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.65.0...v7.66.0)

---
updated-dependencies:
- dependency-name: react-hook-form
  dependency-version: 7.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:24:25 -08:00
dependabot[bot] c1e3a1af72 Bump next from 16.0.0 to 16.0.1 (#20)
Bumps [next](https://github.com/vercel/next.js) from 16.0.0 to 16.0.1.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.0.0...v16.0.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-11 18:24:13 -08:00
Hayden Bleasel 887900970b Manual fixes 2025-10-26 13:27:23 -07:00
Hayden Bleasel d2a085c07e Run Ultracite 2025-10-26 13:26:33 -07:00
Hayden Bleasel a861111a92 Ignore shadcn files 2025-10-26 13:26:31 -07:00
Hayden Bleasel 8b27ebc902 Update biome.jsonc 2025-10-26 13:25:39 -07:00
Hayden Bleasel f26b15bf60 Add formatting commands 2025-10-26 13:25:10 -07:00
Hayden Bleasel e554033f74 Upgrade to Next.js and Fumadocs v16, Ultracite v6 2025-10-26 13:24:24 -07:00
Hayden Bleasel 7860d2e00d Migrate to radix-ui monopackage 2025-10-16 11:27:27 -07:00